Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authent…Check if you run itEPSS 1.57%Feb 22, 2016
- Medium4.3The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability befo…Check if you run itEPSS 1.50%Feb 22, 2016
- Medium5.4The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access…Check if you run itEPSS 1.40%Feb 22, 2016
- Medium6.1Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow…Check if you run itEPSS 1.47%Feb 22, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.…Check if you run itEPSS 1.47%Feb 22, 2016
- Medium4.3mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, wh…Check if you run itEPSS 1.50%Feb 22, 2016
- High7.4Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 a…Check if you run itEPSS 1.85%Feb 22, 2016
- High7.5SAP NetWeaver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 41.45%Feb 16, 2016
- Medium6.1Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web s…Check if you run itEPSS 1.55%Feb 16, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityPatch nowKEVEPSS 71.52%Feb 16, 2016
- High7.5Ruby on Rails Directory Traversal VulnerabilityPatch nowKEVEPSS 95.54%Feb 15, 2016
- Low3.7The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exc…Check this weekEPSS 83.64%Feb 15, 2016
- Medium5.9ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to…Check this weekEPSS 10.73%Feb 15, 2016
- UnknownScans for Ciscos IKEv1 and IKEv2 UDP RCE (CVE-2016-1287) A short dissection on who's scanning for CVE-2016-1287, the latest IKEv1 and IKEv2 Buffer Overflow Vulnerability.Check this weekEPSS 74.22%Feb 14, 2016
- High7.8Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."Check this weekEPSS 15.90%Feb 10, 2016
- High7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel V…Check this weekEPSS 15.69%Feb 10, 2016
- High7.8Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Servic…Check this weekEPSS 19.08%Feb 10, 2016
- High7.8CVE-2016-0052 is listed by inventory_critical.Check this weekEPSS 19.08%Feb 10, 2016
- High7.8CVE-2016-0022 is listed by inventory_critical.Check this weekEPSS 19.08%Feb 10, 2016
- High7.8Microsoft Windows Kernel Privilege Escalation VulnerabilityPatch nowKEVEPSS 24.28%Feb 10, 2016
- Medium5.5Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objec…Check if you run itEPSS 1.53%Feb 8, 2016
- High7.5The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for…Check if you run itEPSS 1.40%Feb 3, 2016
- High8.8Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.Check if you run itEPSS 2.22%Feb 3, 2016
- High8.8Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators f…Check if you run itEPSS 2.40%Feb 3, 2016
Sort